acb25b5b660fda8aea5ff26f5c1a85934fffdc14edf842c7bd885288feb5b6da

Sharing

Copy URL Twitter E-mail

General

Target

acb25b5b660fda8aea5ff26f5c1a85934fffdc14edf842c7bd885288feb5b6da
Size

736KB
MD5

937c566c218e370226313f0845c0d0a0
SHA1

a2533053c76015d0089d51088f5025c0e182e331
SHA256

acb25b5b660fda8aea5ff26f5c1a85934fffdc14edf842c7bd885288feb5b6da
SHA512

775aafdf15a0b13d6c48e0fcf372eb68da44e83e1967e62b6594903f9ebfd09d175e904de094f96eb6626f39d61fc0ee2f894e1200cdb7b4d9b1e710e1826a07
SSDEEP

12288:pGcv5JM1NOIXrZolKwti+LsW4vDEYII1f7Yqxe4zHS0N:xK3Mc0zsJDEYC6HS0N

Score

N/A

Malware Config

Signatures

Files

acb25b5b660fda8aea5ff26f5c1a85934fffdc14edf842c7bd885288feb5b6da
.exe windows x86

a8e3cf296801beea0452e9e6626f4cec

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9c:39:5a:86:d9:1d:a6:3b:ac:9c:ef:69:4a:77:2b:43
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

20/05/2015, 00:00

Not After

19/05/2016, 23:59

Subject

CN=PKK OOO,O=PKK OOO,POSTALCODE=241037,STREET=103 ul.Krasnoarmeiskaya,L=Bryansk,ST=Bryansk Region,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:5e:4f:1e:a8:2a:e0:3d:75:dd:0b:a2:bc:f4:90:15:21:75:28:34
Signer

Actual PE Digest

52:5e:4f:1e:a8:2a:e0:3d:75:dd:0b:a2:bc:f4:90:15:21:75:28:34

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=PKK OOO,O=PKK OOO,POSTALCODE=241037,STREET=103 ul.Krasnoarmeiskaya,L=Bryansk,ST=Bryansk Region,C=RU

28/10/2022, 15:08
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

CheckMenuItem
SetRectEmpty
GetSysColorBrush
PostThreadMessageW
SetDeskWallpaper
DragObject
RealGetWindowClassW
EnumDisplayMonitors
ScrollChildren
CascadeWindows
CopyAcceleratorTableW
ToUnicodeEx
SetForegroundWindow
DrawAnimatedRects
GetMessagePos
GetInternalWindowPos
SetMenuItemInfoW
BlockInput
GetMessageExtraInfo
DestroyWindow
CopyAcceleratorTableA
RegisterHotKey
DefWindowProcA
GetKeyState
CallWindowProcA
PrintWindow
EqualRect
GetMenuState
SetWindowRgn
SendMessageCallbackW
SetSystemMenu
ValidateRect
SetMenuContextHelpId
EnumPropsA
DestroyMenu
ShowScrollBar
GetAncestor
CopyIcon
IsDlgButtonChecked
LoadStringW
FlashWindowEx
OpenInputDesktop
BroadcastSystemMessageExW
TileChildWindows
SetWindowPlacement
TranslateAcceleratorW
SetTimer
DlgDirListW
UnregisterClassA
SetPropA
SetMenuDefaultItem
CharUpperA
EnableWindow
IntersectRect
GetWindowWord
GetMenuBarInfo
GetMonitorInfoW
SetCursorPos
GetKeyboardLayout
DefDlgProcW
FindWindowW
SetParent
CharNextExA
OpenDesktopA
UnloadKeyboardLayout
PostMessageA
MapDialogRect
IsWindowVisible
GetTitleBarInfo
GrayStringA
RemovePropA
GetMessageA
GetDlgItemTextW
CreateIconFromResource
AllowForegroundActivation
ShowCaret
IsIconic
DrawTextExA
GetCaretBlinkTime
ChangeMenuW
ChangeDisplaySettingsA
DestroyAcceleratorTable
ReleaseCapture
IsCharLowerA
GetMenuItemInfoA
GetClassInfoA
GetInputDesktop
PeekMessageW
IsCharAlphaA
IsCharLowerW
PostThreadMessageA
EnumDisplaySettingsExW
OemToCharA
wvsprintfW
CreateDialogParamA
DeleteMenu
UnionRect
InvalidateRect
GetWindowLongW
GetMenuStringW
GetClassWord
UnregisterClassW
EnableScrollBar
SetMenuInfo
WindowFromDC
GetSysColor
CloseWindowStation
GetMenu
PrivateExtractIconExA
GetWindowTextLengthA
SendDlgItemMessageW
GetClipboardFormatNameA
SetWindowWord
SetScrollRange
IsDialogMessageA
CharUpperBuffW
MessageBoxW
CreateDialogIndirectParamA
IsZoomed
GetMenuDefaultItem
ChildWindowFromPoint
LoadIconA
DragDetect
CharLowerA
AppendMenuA
LoadCursorW
SetDlgItemTextA
FlashWindow
SetMessageExtraInfo
FindWindowA
LoadImageA
IsMenu
GetNextDlgGroupItem
SetInternalWindowPos
GetDCEx
SendNotifyMessageA
TranslateMessage
MessageBoxExA
PaintDesktop
GetMouseMovePointsEx
GetMenuItemID
LoadStringA
EnumDesktopsA
GetKeyboardLayoutNameW
SendMessageCallbackA
IsCharAlphaNumericW
SetMenuItemInfoA
GetMenuItemRect
OemToCharBuffA
UnlockWindowStation
GetClassInfoExA
PostQuitMessage
MapVirtualKeyA
FillRect
GetMenuItemCount
MenuWindowProcW
DrawStateA
ChangeMenuA
DrawFrameControl
GetClassLongW
ScrollWindow
SetKeyboardState
SetWindowPos
GetKeyboardType
LoadIconW
CreateCaret
SetThreadDesktop
IsWindow
OpenDesktopW
CreateDialogIndirectParamW
EmptyClipboard
GetWindowRgnBox
DrawTextExW
MessageBoxTimeoutA
RegisterClassExA
EndPaint
CharNextA
EnumDisplaySettingsW
InsertMenuItemW
GetPropA
DrawTextW
DialogBoxParamW
GetShellWindow
DefDlgProcA
EnumPropsW
GetAltTabInfoA
CloseWindow
GetScrollInfo
GetScrollRange
MenuItemFromPoint
SwapMouseButton
MapVirtualKeyExW
LoadBitmapW
GetScrollPos
CreateDialogParamW
EnumPropsExA
wvsprintfA
CreateCursor
ShowStartGlass
CreateMDIWindowA
WinHelpW
DrawTextA
ChangeDisplaySettingsExW
AdjustWindowRect
InsertMenuW
WaitForInputIdle
ShowWindowAsync
GetClipboardOwner
SetProgmanWindow
OemToCharBuffW
OpenClipboard
CascadeChildWindows
RegisterClipboardFormatW
ModifyMenuA
DialogBoxIndirectParamA
SetScrollPos
SendDlgItemMessageA
IsCharUpperW
EnumDesktopsW
GetIconInfo
ToAscii
SetClassLongA
GetCursorPos
InvalidateRgn
CallMsgFilterW
SetDebugErrorLevel
BeginPaint
GetGUIThreadInfo
EndMenu
SendMessageA
SetWindowsHookExA
SystemParametersInfoW
SendNotifyMessageW
ArrangeIconicWindows
GetMenuStringA
SetMenu
TrackPopupMenu
MessageBoxA
EnumThreadWindows
GetMessageW
CreateIconFromResourceEx
GetMessageTime
DefFrameProcA
SetScrollInfo
ChangeDisplaySettingsW
CloseDesktop
DlgDirSelectExW
LoadMenuW
GetMenuContextHelpId

kernel32

GetProcessAffinityMask
FlushViewOfFile
GetProcessHeaps
GetCurrentDirectoryA
GetExpandedNameA
lstrlenA
GetCPInfo
FillConsoleOutputCharacterA
SetTapePosition
TryEnterCriticalSection
GetAtomNameA
FindResourceA
AddVectoredExceptionHandler
MulDiv
RequestDeviceWakeup
BuildCommDCBA
IsProcessInJob
DeleteTimerQueueEx
CreateWaitableTimerW
WriteProfileSectionW
GetThreadLocale
GetConsoleCursorInfo
FindFirstChangeNotificationA
GetLocaleInfoW
FatalAppExitA
GetEnvironmentStringsW
SetLocaleInfoW
VirtualLock
EnumResourceLanguagesA
VerifyConsoleIoHandle
CreateSocketHandle
WriteConsoleInputW
FormatMessageA
SetFileShortNameW
SetComputerNameW
FindFirstVolumeA
SetVolumeMountPointA
EnumDateFormatsExA
GetDriveTypeA
VirtualFreeEx
GetUserGeoID
GetCurrentThread
SetStdHandle
CreateProcessInternalA
ClearCommBreak
GetDiskFreeSpaceExA
OutputDebugStringW
SetTimeZoneInformation
EnumSystemGeoID
FoldStringW
WaitCommEvent
MoveFileWithProgressA
HeapCreate
LZInit
GetVersion
TlsGetValue
ResetEvent
SetThreadPriority
WritePrivateProfileSectionA
WriteConsoleOutputA
ReadConsoleInputA
GetLogicalDrives
DosPathToSessionPathW
ReadConsoleInputExW
GetPrivateProfileSectionNamesW
OpenEventW
IsBadReadPtr
TerminateJobObject
GetSystemDefaultLangID
GetShortPathNameW
LocalSize
Heap32ListFirst
SetTimerQueueTimer
CreateMailslotW
RemoveDirectoryW
ClearCommError
QueryDosDeviceA
GetCommState
FreeEnvironmentStringsA
ReplaceFileW
GlobalAddAtomA
EraseTape
WritePrivateProfileSectionW
EnumSystemCodePagesA
IsBadStringPtrW
LeaveCriticalSection
CompareStringA
GetTapePosition
WinExec
lstrcmpA
CopyLZFile
InitAtomTable
lstrcmpiW
HeapUnlock
FindNextFileW
InitializeCriticalSection
OpenFileMappingA
GetDevicePowerState
CreateNamedPipeA
GetConsoleHardwareState
HeapQueryInformation
lstrcpynA
FindAtomW
FlushInstructionCache
FreeLibraryAndExitThread
SetComputerNameExA
PeekNamedPipe
Heap32ListNext
GetEnvironmentStringsA
GetLongPathNameA
GetCPInfoExW
GlobalMemoryStatusEx
GetNamedPipeHandleStateA
VirtualFree
GetThreadPriorityBoost
GetConsoleSelectionInfo
IsProcessorFeaturePresent
GetACP
GlobalFlags
WriteConsoleInputA
FlushFileBuffers
QueryActCtxW
RegisterWowExec
CreateTimerQueue
ReadFileEx
GetExitCodeThread
PeekConsoleInputA
SetSystemPowerState
GetConsoleCharType
VirtualQuery
MoveFileW
EndUpdateResourceW
FindAtomA
WritePrivateProfileStructA
GlobalReAlloc
WaitNamedPipeW
SuspendThread
GetConsoleKeyboardLayoutNameA
DeleteCriticalSection
GetComputerNameExW
LocalReAlloc
GetComputerNameA
GetThreadTimes
WriteFile
GetStartupInfoA
CreateTimerQueueTimer
GetProfileStringA
EnumSystemLanguageGroupsW
WriteFileGather
SetLocaleInfoA
CloseProfileUserMapping
GetPrivateProfileSectionNamesA
DeleteAtom
LZClose
CallNamedPipeA
CreateJobSet
GetLastError
CreateJobObjectA
InterlockedCompareExchange
RaiseException
SetDefaultCommConfigW
GetEnvironmentVariableW
GetCompressedFileSizeA
RtlCaptureContext
OpenJobObjectW
TlsFree
GetMailslotInfo
FindResourceExW
ActivateActCtx
ConnectNamedPipe
FindVolumeClose
SetEndOfFile
FindFirstVolumeW
ShowConsoleCursor
EnumDateFormatsExW
SearchPathA
FileTimeToSystemTime
GetVolumePathNamesForVolumeNameW
GetFileAttributesExA
SetFileAttributesW
GetCurrentDirectoryW
GetPrivateProfileSectionA
QueryPerformanceCounter
LZOpenFileA
QueueUserWorkItem
GetEnvironmentStrings
WaitForMultipleObjects
CopyFileExA
SetCalendarInfoW
lstrcatA
WriteConsoleW
SetMailslotInfo
FindNextVolumeA
SetComPlusPackageInstallStatus
SetLocalTime
BuildCommDCBW
OpenFile
UnregisterWaitEx
SetProcessShutdownParameters
GetThreadPriority
SetFileShortNameA
ConsoleMenuControl
RegisterWaitForInputIdle
AddRefActCtx
FindNextFileA
GetExpandedNameW
AssignProcessToJobObject
RemoveDirectoryA
UnhandledExceptionFilter
TransmitCommChar
GetProfileIntA
DelayLoadFailureHook
FindFirstFileExA
SetVolumeLabelW
GetCommModemStatus
GetConsoleTitleW
GlobalUnlock
SetEnvironmentVariableA
GetModuleHandleExW
LCMapStringA
lstrcpyA
LZSeek
SetLastError
IsBadStringPtrA
SetThreadContext
GetProcessShutdownParameters
GetLogicalDriveStringsW
EnumSystemCodePagesW
CreateFileA
GetFullPathNameA
SetErrorMode
UnregisterWait
SetComputerNameA
CreateSemaphoreW
UnlockFileEx
LZCopy
IsWow64Process
GetCurrentThreadId
GetConsoleMode
BackupRead
SetCurrentDirectoryW
GetSystemDirectoryW
FindVolumeMountPointClose
PulseEvent
GetSystemDefaultLCID
GlobalHandle
GetVolumeNameForVolumeMountPointW
FindActCtxSectionStringW
lstrcmp
RegisterWaitForSingleObject
PrivMoveFileIdentityW
GetFileSize
CreateThread
GetTempPathA
HeapValidate
CreateDirectoryExA
lstrcmpi
CancelIo
SetFileApisToANSI
lstrcpyn
GetThreadContext
LocalCompact
GetSystemPowerStatus
GetFullPathNameW
ResetWriteWatch
GetConsoleFontSize
AddAtomW
MoveFileWithProgressW
FindResourceW
SetThreadLocale
GlobalFree
GetCurrentActCtx
GetModuleHandleW
lstrcpyW
GetConsoleAliasesA
GetCurrentProcessId
FindFirstFileA
InterlockedExchange
EnterCriticalSection
SetEnvironmentVariableW
OpenMutexA
CloseHandle
SetFileApisToOEM
FindNextChangeNotification
GetProfileIntW
GetDriveTypeW
CreateDirectoryExW
CreateFileMappingA
BackupSeek
FindResourceExA
MapViewOfFileEx
GetCurrentConsoleFont
GenerateConsoleCtrlEvent
PrivCopyFileExW
WritePrivateProfileStructW
AddConsoleAliasA
IsBadHugeWritePtr
GetModuleFileNameA
GetComPlusPackageInstallStatus
HeapReAlloc
GetProcessIoCounters
GetNumberFormatW
GetCommProperties
RtlCaptureStackBackTrace
GetModuleHandleA
FreeUserPhysicalPages
GetStartupInfoW
UnlockFile
GetSystemInfo
CreateActCtxW
SetSystemTime
EnumCalendarInfoExW
VirtualUnlock
PrepareTape
CreateHardLinkW
LZRead
SetFilePointer
lstrcmpW
GetNumberOfConsoleFonts
GetLocalTime
SetFileTime
WriteConsoleOutputCharacterA
OpenWaitableTimerA
WaitForSingleObject
Heap32Next
GetDateFormatA
LZStart
GetCalendarInfoA
GetVolumePathNamesForVolumeNameA
GetTimeFormatW
lstrcatW
GetProcessTimes
FileTimeToLocalFileTime
GetDateFormatW
WaitForMultipleObjectsEx
QueryPerformanceFrequency
InterlockedIncrement
GetNamedPipeInfo
LocalFree
WriteConsoleOutputW
ReadConsoleOutputCharacterA
GetConsoleProcessList
GetBinaryTypeW
CopyFileA
GetProcessHeap
GetUserDefaultLCID
GetConsoleWindow
HeapWalk
GlobalUnWire
IsValidLocale
GlobalAddAtomW
IsBadHugeReadPtr
GetModuleFileNameW
GlobalMemoryStatus
MoveFileExW
GetBinaryTypeA
TlsSetValue
SetInformationJobObject
SearchPathW
FindClose
CreateJobObjectW
DeleteVolumeMountPointA
MultiByteToWideChar
GetTimeZoneInformation
GlobalLock
CreateNamedPipeW
DeleteFileA
FindFirstChangeNotificationW
GetFileSizeEx
SetPriorityClass
lstrlenW
ConvertDefaultLocale
ReleaseSemaphore
GlobalFix
CreateMemoryResourceNotification
Heap32First
SetUserGeoID
GlobalSize
SetLastConsoleEventActive
GetCurrentProcess
GetVersion
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

ole32

OleCreateDefaultHandler
CreateBindCtx
IsValidIid
CreatePointerMoniker
GetHookInterface
HACCEL_UserFree
HMETAFILE_UserUnmarshal
StgCreatePropSetStg
HICON_UserSize
CoFileTimeToDosDateTime
WriteClassStg
IsValidPtrIn
OleDoAutoConvert
CoInvalidateRemoteMachineBindings
PropVariantClear
UpdateDCOMSettings
HDC_UserSize

comdlg32

GetFileTitleA
FindTextW
dwLBSubclass
ReplaceTextW
LoadAlterBitmap
GetSaveFileNameW

oleaut32

DllUnregisterServer
VariantTimeToDosDateTime
VarUI4FromCy
VarBoolFromI4
GetActiveObject
VarI1FromStr
VarUI1FromDate
DispInvoke
BSTR_UserFree

shell32

SHParseDisplayName
DllInstall
DllUnregisterServer
SHExtractIconsW
ShellExec_RunDLLW
RealShellExecuteW
SHGetNewLinkInfo
SHCreateDirectoryExW
ShellAboutA
SHGetFileInfo
DllGetVersion
PrintersGetCommand_RunDLL
DragQueryFileAorW
SHGetDiskFreeSpaceExW
FindExecutableW
SHBrowseForFolderA
Shell_NotifyIconW
DragQueryFileA

winspool.drv

DeleteFormW
GetPrinterDriverW
CloseSpoolFileHandle
FreePrinterNotifyInfo

gdi32

Ellipse
GetCharABCWidthsW
GetTextExtentExPointW
EngMultiByteToUnicodeN

comctl32

ImageList_Draw
ImageList_DrawIndirect
ImageList_SetOverlayImage
CreateUpDownControl
ImageList_DragLeave
CreatePropertySheetPageW
ImageList_Read
ImageList_DrawEx
ImageList_Write
GetMUILanguage
FlatSB_SetScrollPos
FlatSB_GetScrollPos
MakeDragList
ImageList_GetDragImage
InitializeFlatSB
DrawStatusText

Exports

Exports

ha��ה�l��3�4,��X2�zCꂅ�3�=�[ I�"�ys� �Ě 5]_b��6��0��wP,P텬�6��~��~rB�lTV4��{�Yس��t��m��'��I6�x)t��؅o��l��ۙYVE��6��U��>��S}�1��#.|r�w��, �T�u��HS6Qk�C�Ԡ��7j[��>��Ne ��(�3L)�x�T��\�!��3j�t��1:�2��1�;4!��\��L5Nk ��X'��W�u=��n�F]9��5Ơa��<7'��44w�4��=��RŅxS�0��Wc�R�#� �z��U7��ʿ_��vw��/��Ɖ,��3��Qʭ.y��UbT�ýJ.�M6�<s��m��C��DJg�\1�<��4<�c�͏�j=�7�nudS�7��:C��DY�N"��.�.d{�S��HF�?<<��Ԛ;��#�� 1�'?Me��8[\KӃ��r�o�{��x� ��B%�<"$d��q��|u ��%Om��\5��t��~vC�#1 [>Dț�mk��4��e>WADfY��Ѳԋ�z�*"h��Ff�<)�$_\a�s>�N�=!�*q!ZVd��`92��>:.��x?��k�!˘��lq��d�~=p�"ۮS>�aF�KJ��!fa$"�ܑk%��4|��v�>�{�A��e7X�9� w�2��O��VsQ>��,^}��sFÕ��Y��JEqm(�E�o��}Y;��5�эlb�55��ƂRFm<L2��]��4��T{��j�$�*z��e�)o�'X.B@��G�𝌽¿9Ei4� y)��]K�X��z5󫘞�w�Yu�,�$��28��-р��s^ƌ�K8)s�Dk��ƥ`�ੂt�=�m�� MyV�Wr'��: lK�OB1�׾��Y��#$Ͼ��%޼��1Ṁ�a�?�� Ql��M{��yOaٌ2~./�V'�~I�s��U��u/�l�7��?�hrS��:�B�� 3��y��J��c�NG��1�Q/~'\4W}눂B"�� 2B�Q�,�I_�}F�5%�E*}D��!�(��T<M��KJ�!�D�-3sw�~}�tꝖ�<.�jo��Q�� ?p��qH�Kz��Pn�~i�c��B�3$�*U\u�}��H�G{#v�<l��ջ,О�T%��=��k7H��_k0J��4��ʁ�^"��y��i��-i��9k��d�N��H�7f�]:Dil�W��^c;ǃ!��@��*�?��L S!1��-le��3��Tr�0x��a�-7Zh�A�Ɯ�5�� mY@�>�t�V��n#��),�P��c� ]R��Q �*k��IUw��M�LZ F�`��Y��j]K�'� 0H�"b�N"]��r��' ��c��z`��P�h�FF�C�*�=�� Z0+�{^��|(A��v�2�Ӧ8�3��j�� !Ð��?��S�H��f왏-��yV��&��{W�]��1�~B_�(K��j��P��x8˨r}�Q�.��k�"t��pbH��M�[��I��j��z "ڡRR��GPݗr�^1��c�M^�MA��\L(�[ڼJ�=3�Yꯊ��C��vrH�e�$�@�)9��t��+2 I�}=9:jc�|M�%4j5�׆�?o?m�1I��#�A��f��`]��rB��[:l��p�~��j?"�\��0Q��v�'$��l��?֔�nL0�c��E _s!�>4# ,[��z�co?��-S� x��B�UW��EHK0kD� ��V�*]��5'��*Ie��.�P�L�f3R��W��U��>^ ��,/�D�Q!�>��8s0��\;��Ԥ� �t>�A�Xo c3Y%j��F�Ste�;��r3&�x-eP89,s�t��`��1��xn�S��t;8)�:_�[�|�'�VO�S��M*h��fu��۴2��٬gD�.��@=_��z2VK��⒭ez�N{<��6��HU�,��h�n��ְB��uaE�$��r��T^��bI�~��T]�Z�<�$��x p=]7*C=!v��7��h��<`!Z*ݝh��޹&q b��#3��vo��m�ax�"mNh��7�^i�ո�A)��V�߼�ܰ�1"e��[�2߽��佈��@��k �y��[��Z�m�(�p➱��:zh=�FkZ2��f�c�&ㆱ�)��vo��ɞ1;��KgEY�b��2��D�*6�6΃�y�� T�B�.,�Z�}Y�I�Y1(�f��:�@�_�l(�cYG�篋*`��ZL��A��NK�Hoѩ��R��k��6Q��>�[&��d�g]��Akа ҅ :�؃�MI��6��~��C�yAtяB��3mHn�^��;��١47�ur�8<oe��&��jdƨ߭�u᏶|{��+�ֶ��i��L��N��q5q"*6�"�U'h�^t�vұ�m��s��iI�߮��R�].��G�c9X�s�{G��޳1�Z#a]o�,uγ��Ǩ�08�=�_m��F�P��ϡoY/��c��׸��:#�S�F1=��z��ӊi�W!��[�|�8��ۮ1v��1,��B��e>��.�AH�˖�(g�k~T�5_�E?�A��~T$J6�k��-��d4��E��)d\�b̬�U��m��ZP�oZ�0��CǆR^��ݡ�V�5�K$mH��tP��;�8�Iz��j��mH S�<�ֲ��8��=o�%�< 8�!j�& ��\Y�� !�K/(�3�wyH6��=��ۋ E��8�lrJ8��'��U�wHvUځlܨ v��k�#��e�n�:��=p

Sections

CODE
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text0
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8e3cf296801beea0452e9e6626f4cec

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

01Certificate

Key Usages

9c:39:5a:86:d9:1d:a6:3b:ac:9c:ef:69:4a:77:2b:43Certificate

Extended Key Usages

Key Usages

52:5e:4f:1e:a8:2a:e0:3d:75:dd:0b:a2:bc:f4:90:15:21:75:28:34Signer

Signature Validations

Verification

28/10/2022, 15:08 Valid: false

Headers

File Characteristics

Imports

user32

kernel32

ole32

comdlg32

oleaut32

shell32

winspool.drv

gdi32

comctl32

Exports

Exports

Sections

CODE Size: 447KB - Virtual size: 447KB

DATA Size: 18KB - Virtual size: 18KB

BSS Size: - Virtual size: 1KB

.idata Size: 16KB - Virtual size: 16KB

.text0 Size: 16KB - Virtual size: 15KB

.tls Size: 512B - Virtual size: 24B

.text1 Size: 72KB - Virtual size: 72KB

.reloc Size: 8KB - Virtual size: 8KB

.rsrc Size: 150KB - Virtual size: 150KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

01
Certificate

9c:39:5a:86:d9:1d:a6:3b:ac:9c:ef:69:4a:77:2b:43
Certificate

52:5e:4f:1e:a8:2a:e0:3d:75:dd:0b:a2:bc:f4:90:15:21:75:28:34
Signer

28/10/2022, 15:08
Valid: false

CODE
Size: 447KB - Virtual size: 447KB

DATA
Size: 18KB - Virtual size: 18KB

BSS
Size: - Virtual size: 1KB

.idata
Size: 16KB - Virtual size: 16KB

.text0
Size: 16KB - Virtual size: 15KB

.tls
Size: 512B - Virtual size: 24B

.text1
Size: 72KB - Virtual size: 72KB

.reloc
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 150KB - Virtual size: 150KB